I don't think the logic implemented by RtlIsDosDeviceName_U() is all that different from the logic in the patch. Which is to say, it seems to use a hard-coded list of names and does not actually check for existing devices. Do we want to block all names that could be DOS devices or just the names of devices that exist?

This is interesting:

http://msdn.microsoft.com/library/en-us/fileio/base/querydosdevice.asp

So is this:

-----
C:\>ver

Windows 98 [Version 4.10.2222]


C:\>type config$

Invalid device request reading device CONFIG$
Abort, Retry, Ignore, Fail?f
Fail on INT 24 - config$
-----

Cheers



Reply via email to